DHCP服务限制某个MAC地址

pzw1985

CentOS5

请问如何在DHCP服务器中限制某个MAC地址获取IP？
因为公司的无线经常有手机接入 导致IP地址池紧张

谢谢~~

dengbao2001

不好意思，看错了标题

pzw1985

回复 2# dengbao2001


    不好意思，操作系统是Linux啊，CentOS 5

dengbao2001

我在红帽开CASE问问

darrenlee3

host name{hardware ethernet $MAC;deny booting;}

真要限制MAC得用防火墙，不是dhcpd

pzw1985

回复 5# darrenlee3


    是添加一个禁止该MAC地址到DHCP服务器访问的策略吗？

感觉不方便。。还有其他方法吗？

dengbao2001

不好意思，上午没看清楚，以为是Windows下面，在Linux下面，其实我也想知道。正好我们有服务，开了CASE问了红帽。

请楼主测试下，记得测试后，更新下结果呀



You can edit /etc/dhcpd.conf file this way to deny specified NIC which is using certain MAC to get IP from this DHCP server:

    class "deny-class-1" {
                  match pick-first-value (option dhcp-client-identifier, hardware);
                }

                subclass "deny-class-1" 1:00:0C:29:26:1B:28;
                subclass "deny-class-1" 1:00:0C:29:32:23:96;

                subnet 192.168.100.0 netmask 255.255.255.0 {
                  pool {
                    deny members of "deny-class-1";
                    range 192.168.100.60 192.168.100.70;
                  }
                }

Parameter Description of above configuration:

1) "deny-class-1" == This is a class name and under that subclass is not working which will use the main class name i.e. deny-class-1

2) Then we have specified the MAC address of client machine which we don't want to allocate IP form Pool  (From 192.168.100.60 TO 192.168.100.70)

3) Notice 00:0C:29:26:1B:28 is a MAC address and before that we need to specify the 1 number.

4) subclass "deny-class-1" 1:00:0C:29:32:23:96;
   In this line we are again specifying the next system's MAC address and this client will also can't get IP from Pool.

5) You can create as many classes as you want

6) You can create as many subclasses as you want

Note:- One needs to specify the pool and MAC address as per the requirement.

pzw1985

回复 7# dengbao2001


    刚才试了下不行，改了之后服务起不来了
我等下再试试
谢谢~~！！

dengbao2001

别写错了格式和字符

zongg

dhcp + squid 也可以实现,相对来说也麻烦.
iptables 也能实现,
简单的方法就不清楚了.